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(54) Abstract Title 

Electronic rights management 

(57) A proxy service provides a point of intervention for applying information handling policies, especially 
copyright enforcement- A proxy server 12 accesses a rights management file, drm, when a client 10 wishes to 
send or request Information, and forwards or obtains the information by contacting a further server according 
to the file contents, thus enforcing the policies. This arrangement is particularly useful where users with 
heterogeneous viewing environments need policies applied in a flexible and uniform way. Mechanisms of 
user authentication and authorisation are kept separate from the policy enforcement process. 
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FJ ^mUQNIC RIGHTS MANAGEMENT 

This inv^ntionielates g^eraUy to electrozdc rights management, and inparticular, to afleodble 
platform for supporting rights managemCTt schemes and odier infomiation h a nd lin g potici^ 
especially for use in information technology networked environments. 

Backgroimd to the Invention 

Copyright is an intellectual property right which gives rights to the creators of certain kinds 
of material, so that tiiey can control the various ways in which tiieir material may be exploited. 
It is intraded to protect original literary, dramatic, musical and artistic works, published 
editions of works, sound recordmgs, fihns Cmcluding videograms) and broadcasts (includmg 
cable and satellite broadcasts), and the rights afforded by ccqiyright broadly cover copying, 
adi^ting, issuing copies to tb& public, performing in public and broadcasting such protected 
material. Li many cases, the author wifl also have the right to be identified on his wori^ 
object to mutilations and distortions of his work. Further, a rmtal right is given to owners of 
copyright in sound recordings, fihns and computer programs and therefore the exploitation of 
such worics by renting them to die public requires a licmce fiom the copyright owner. 

In recent years, it has become increasingly commcm to store content such as sound recordings, 
literary works and fihns electronically, and the commercial distribution of electronic content 
such as this traditionally takes place through retail outlets, such as record or book shops. 
Commercial distribution of electronic content o\er an information technology network has 
many advantages, but has not yet been widely adopted by creators and commercial distributors 
ofsuchcontOTt, largely becauseof fears relating to the resdtant increase in pote^ 
which such content may be illicitiy reproduced, sold and distributed by third parties. For this 
reason, significant efiFort has been directed toward die development of technological 
safeguards which prevent unaudiorised copying of electronic content. 



Digital content is relatively easy to copy illegally, which is both advantageous and 
disadvantageous for content provides in the s«i8e that on the one hand it is desirable for the 
content to be distributed as widely as possible (thereby increasing its value and therefims the 
potential revenues to be gained fhetefiom). but they stiU want to «sw 
eachsale,U.theydonotwantpiracylakingplace. In older to prevent piracy, as stated above, 
the content providers are inclined towards the use of digital protection schemes (which are 
normallybasedonencryptiontechniques)^chare a) difficult to use for consumers and 
iestrictdistnT,tttion.b)expensivetomanage.andc)possiblyundercutb^ 
which provide the same content with an easier user experience. 

One known protection scheme is provided by the Microsoft Digital Media System in which 
electronic content is provided with a key. with a corresponding tosy being i«,uired to be 

obtained fiom an authorised key server before the user canplay the content Oneofthemain 
disadvantages of tins scheme is that it is tightiy bound to the user's player, in the sense that 
special equipment is required by the user if feey wish to play the content protected by this 
scheme. 



Mgeneral.manyknowndigitalrightsmanasementandptotectionschemesinvolvB8rf^^ 
encryption of material, making it difficult to copy, and/or difficult to play copied content 
Digital rights management (DRM) technologies in cmrent use make themselves apparent to 
users eiflu^ as secure containers. i.e. they define their own proprietary file format, inside of 
which they securely encapsulate an arbitrary media file. 

For example. US patent no. 6138119 describes techniques for defining, using and 
manipulating rights management data structures in which the conc^t of a secure digital 
container is used for safely and securely storing and tran^orting digital content Such 
containers are tamper-resistant containers whi<* can be used to padcage any kind of digital 
information, sud, as for exan^le, text, gr^hics. executable software, audio and/or video. 
However, this ^roach limits the context in which secured content may be used. 



An alternative type of system provides a «pl«8-m" security function to a particular media 
foimat(8uchasAdobe™PDF). Although the software plug-in business model has been used 
successfully for years to extend appUcations in olher specific markets, such as video and audio 
(pluggable codecs), multimedia (pluggable executables that "extend" programs), weativity 
tools (filters tbat extend image processing tools) and Web browsers, currently only Adobe 
Acrobat ™ provides a security function with which third-party developras can mrifiirmly 
develop DRM systems that <q)erate within a particular format. However, the approach used 
inthissystemislimitedby the media capabilitiesof the target format (PDF). i.e. this approach 
Imuts, to a single format, the number of media types fliat may be secured. 

Providers, intemiediaries and consumers of digital information products suffer ftom a "poUcy 
enforcement disoonnectf in fliat there are no consistart platforms upon which information 
producers may e3q)ress their mteUectual property rights (IPR) and assert th^ 
espedaUy those ttiat specify niles for thehandlingofdidTinfonnatianbyintennedi^ 

wholesalers, retailers and libraries). There are no consistent pUrtforms for tfwir information 
toberenderedfbrusersandtheirpoUciestobeinteipretedandenforced. Consumers who are 
concerned abom the transmisaon and rwiseofprivate data that they may divulge du^ 
course of networked transactions similarly have no consistent platform under their control to 
CTforce dieir personal information handling policies. 

hi general, participants in information value chains want to express poUdes by which they 
require their infonnation to be handled, as weU as policies by which the information they 
receive to be handled or processed before it gets to them. This problem cannot be solved in 
a systematic and c(»isistait way using known technology. 

The concept of usmg a proxy service (where 'proxy' in its broadest sense simply means 
•authorisation given to a substitute or deputy') for the purpose of content filtering and 
ads^on is known. For example, rule-based filtering for the purposes of sirippmg web 



advertisements or othermidesirablecontm^ In particolar, US patent 

number 5^6,011 descries a system and method for restricting access to data received by a 
computeroveranetworicbyfflteringcertamdatafiomthedatarecdv^ In one embodiment, 
a comiiiitBr.based method is described for filtering objectionable or taiget text data from 
Worid Wide Web pages which are received by a computer system connected to the Internet. 

US patent number 6,119.165 describes a system whereby, in an Internet or Intranet 
environment, aproxy server which supports anumber of clients has additional functionality 

which allows it to debverasofhvaiemoduIetoaparticularcKent depending on characteristics 
of that client This downloaded module is then executed by the cUent which sets tq> a 
bidirectional communications link between the proxy server and the dimt The bidirectional 
link allows for instanceastatusdiq)lay at the cKent, by useofawindowatthecUentplatfon^ 
indicating the current status of proxy server activity such as vinis scanning, COM 
bandwidth usage, etc. In other appKcations. the downloaded module aUows provision of an 
organisational bulletin board, news diannel, or provider of common software patches. 

US patent number 5,987.606 describes a system for fihering hitemet content retrieved fiom 
an Internet computer networic by a nanote Internet Service Provider (ISP) server and 
forwardedtoalocalcKentcomputer. The system matches at least one filtering scheme, such 
as an inchisive or exclusive filter, and at least one set of filtering elements, such as a Ust of 
aUowed or excluded sites, to each Internet request generated at the local client computer. In 

this case, the filtering scheme is implemented on the ISP server, but in general, these typesof 
filtering and adaptation services may be applied at the client end. the server, or points in 
between the two. Furthermore, filtering and adaptation need not be limited to down-stream 
content (i.e. content received by the client platfonn fiom the server); proxy services exist that 
ad^t user inputs for the purpose of ensuring privacy and/or anonymity. 

However, none of the known proxy services provide practical point of intervention for the 
appUcation of information handling policies, eq>ecially copyright management and 



enforcement services. In general^ as stated above, knownmechanisms for ^forcing copyright 
poticies have generally required either specialised client side ''readef software that detracts 
from the end-user's enjoyment of the content, or they use very limited content-dependent 
policy CTforcement ftmctions on flie server side, &mby limiting viewable content 
Specialised client applications have numerous disadvantages associated with them, ranging 
fixnn limitations d^endmt on platform con4>atibility and/or application compatibility, to user 
inconvenience. Known server-based systOTis also have a numbor of weaknesses, related to 
issues ranging from administrative granularity to content flexibility. 

We have now devised an arrangement which seeks to overcome th^e problems. 

giimniflty of tfie Invention 

Thus, in accordance with a first aspect of theinesent invmtion, there is provided s^aratus for 
providing a proxy service between one or more client platforms and one or more remote 
contentprovidm providing electronic content or infimnation, the sqiparatus comprisingmeans 
for receiving and int^preting a request fnm a climt platform for electronic content fiom a 
content provider, means for transmitting saidrequestto said content provider and forreceivmg 
data mcluding at least one marker identifynig the location of a rmiote information handling 
and/or policy enforcement server s^ropriate to die content bemg requested, means for 
interpreting said one or more markers and transmitting a request on bdialf of said client 
platform for a clear-content version of said content for transmission to said client platform 
provided that the requirements of the information handling and/or poUcy enforcement service 
are met. 

Also in accordance with the first aspect of the present invention, ttiere is provided a method 
of providing a proxy service between one or more client platforms and one or more remote 
content servers providing electronic content, the method conqmsing the 8tq;>s of receiving and 
intopreting a request from a client platform for electronic contrat fiom a content server, 
transmitting said request to said content server and for receivmg data including at least one 



maiker identifying the location of a remote information handling and/or policy enforcement 
server ^ropriate to the content being requested, means for interpreting said one or more 

markers and transmittinganjquestonbehalf of said client platform foraclcar-K»ntentve^ 
of said content for transmission to said cKent platform provided that the leqoii^ents of said 
information h a ndlin g and/or policy ofotcement sovice are met 

In accordance with a second aspect of flie present invention, there is provided apparatus for 
providing a proxy service between one or more client platforms and one or more remote 
platforms ammged to receive electronic content or information from said one or more client 
platforms, the qiparatus comprising means for receiving data fiom a client platform for 
transmission to aremote platfonn, said data bemg representative of information or content to 
be provided to said remote platform and mcluding at least one marker identifying the location 
of a remote mfonnation handling policy enforcement service appropriate to tiie mfcmnation 
being provided, means for interpreting said one or more markers and transmitting a request 
to the ^jpropriate information handling policy enforcemait service for a clear-cont^t vosion 
of said information to be provided to said remote location provided tiiat the requirements of 
said infoimation handling policy raforcenient sovice are met 

Also in accordance with a second aspect of the present invention, there is provided a method 
for providing a proxy service betweai one or more client platforms and one <x more remote 
platforms arranged to receive electronic content or infonnation fiwn said one or more client 
platforms, the method comprismg the steps of receiving data fiom a client platform for 
tiransmission to a remote platfonn, said data being representative of information or content to 
be provided to said remote platfonn and mcluding at least one marker identifying tiie location 
of a remote infonnation handling policy enforcement service appropriate to the infonnation 
being provided, interpreting said one or more markers and transmitting a request to tiie 
^Jpropriateinfonnationhandling policy enforcement service for a clear-content version of said 
information to be provided to said remote location provided that the requironents of said 
information handling policy enforcement SCTvice are met 



Thus, the present inventirai provides a proxy service can be used as an intermediary 
between a client platfoim and several diffoeat contrat providers having difGaeht riglits 
managanent or infaimati(m handling policies to msure fliat sudi policies so that tiie content 
providers can ensure tiiat fliwr particular policies are eofinced. The present invention also 
provides a proxy s wvice which can be used as an intomediary between a cKent plat&on and 
several different remote locations to which the client platform may wish to send sensitive, 
private or confidential information, to ensure that the client platform's 
confidentiality/anonymity policies are i^held. A single proxy service according to the 
invention may be used to achieve both objectives, i.e. such a service could be arranged to 
hpptiie datff Mwwwtg from and going to a client platform. 

The iKOxy service may be located locally on tiie client platform. However, if tiie *cUent' 
comprises an organisaticmal network comprising a plurality of platforms, tiie proxy service 
may be located centrally witiiin such a network. Altonatively, tiie proxy s«ver may be 
located at a remote point witiiin an infonnation technology network, such as tiie Internet 

In response to a request for content by the proxy swvice. the content server returns a data 
stream including one ormoiemaricers including details(8uchasaXJRL or DOI)oftiielooati<m 

of one or more otiier services wifli which tiie proxy service must interact before a copy of tiie 
content can be transmitted to ttie cUent platform. Such markos are inferably embedded 
witiiin tiie data stream and only recognisable and inteipretaible by specific means provided 
within the proxy service. 

In transniitting(eitiierdirectiy or mdiiecdy)arequest fertile content to tiieremote information 
handling/ri^tsmanagemmt server, tiie proxy swvice is preferably arranged to include in tiie 
request data relating to tiie clioit platform, sudi as the session id in the case where the clioit 
platform is a web browsor or tiie like. Thus, tiie infonnation handling/dghts management 
server is provided witii specific details relating to tiie client platfomu The request may also 
mchide sped&c details of tiie end rxser, especially in the case tiiat tiie end user and the client 



platfonn are not the same entity and there are no specific requirements related to the 
infonnation handling/rights management server for interaction between Ae end user and the 
client platform. 

Once the request for content is received fiom the proxy service, and the information 

handling/rightsmanagementsen^erhasveiifiedthelegitimacyofthereqnest,^^ 

content version of the content and stores it (preferably temporarily) at a particular location. 

either locaUy orremotely. andretums details of said location to the proxy service. Theproxy 

serviceis preferably arranged to transmit die detailsoffhe location at which aeclear^ntent 
version of the content is stored to the cKent platform, so that the cHent platfonn canretiieve 

saidclearH»ntentcopy,ifcertainrequirement8of the information handlingWghts management 
server are met. 



Itwillbe^reciatedthatthepoliciesadoptedbytheinformationhandling/rightsmanagement 
servCT will be dependent upon the requirements of the content provider and. of course, the 
nature of the content being requested. It will also be q>preciated that the information 
handlingAights management service may be associated wifli the cUent platform or the end 

user,such that infonnation being transmittedtoaremote location fiom the cHentplatform^ 
be handled by the proxy server and processed througji the appropriate information handling 
service prior to transmission thereof to said remote location. 

Brief Description of th e Drawinps 

An embodiment of the present invention wiU now be desoibed by way of example only and 
with reference to the accompanying drawing which is a schematic flow diagram iUustrating 
the operation of an exemplary embodiment of the present invention. 

Detailed Description of ttie Inven^ nn 

Referring to Figure 1 of the drawings, there is illustrated a typical set of (potential) 
connections between a web browser 10 (accessible via a client computer platform - not 



shownXaproxy server 12 according to the invention, and a digital rights management (DRM) 
web SGvice 14, the connections typically being made across an infiinnaticni technology 
networic, sudi as the Internet. The arrows 1, 2, 2a, 3, 3a, 4, 4a, 4b. 4c, 4d, 5, 6 and 7are 
directionally illustrative of requests and responses which may be communicated between the 
wd> browser 10, the proxy server 12 and tiie DRM web service 14 in an exemplary process 
to be described below. 

In the first instance, the web browser 1 0 logs in to the proxy server 12, at whidipoint a unique 
session ID is generated which is invisible to the end user and which is used for session 
verification later in the process. 

Refening to anow I, flie viewing client or wd> browser 10 makes a request of a networic 
tesomce by {nesentmg Hbe networic address (for example, URL or DOI) to tiie proxy server 12. 
It win be ^»preciatedfliatthe proxy server 12iiMiy be located locaUy on thensw'sworicstati 
cenHally widiin a corporate or institutional networic, or at a distant point on its Internet 

The proxy swver 12 sraids (via arrow 2) the appropriate netwoik request for flie resource to 
a content saver 16, typieaUy by means of the HTTP protocol. The contoit server 16 {vAaxii 
is typically at a different location to the proxy servw 12) returns (via arrow 2a) the resource 
(e.g. a web page), typically in the form of an HTML file or a more general XML file. 
Embedded witfiin the resource file are mariciq) tags or the like for calling other resources 
which can only be retrieved by special processing (according to the information handling 
policy or digital rights management mechanism provided by the proxy server 12). In this 
embodiment of the presrait invention, such markup tags are denoted as <DRM> objects. Such 
<DRM> object instances within the othCTwise "open" data stream being sent to the proxy 
servo- 12 have attributes (e.g. URL's or DOI's) vMch reference ofter web resources with 
which die proxy server 12 must interact to obtain die location(s) of clear (i.e. unenraypted) 
versions of tfie embedded content objects. 
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It will be q)preciated that the proxy server 12 is adapted to recognise the markup tags 
embedded in the data stream received from the content server 16* If the web browser 1 0 were 
to attempt to retrieve the data stream direcdy fiom the content server 1 6, wi Aout first passing 
through the proxy 12» it would only be able to recognise the "q)en" portion of the 
stream* it would not be able to recognise or interpret the markup tags (Le. dise would be 
ignored by the web browser 10). 

As the proxy server 1 2 receives the resource data stream from the content server 1 6, it passes 
&e incoming stream according to a set of generated rules to discover the one or more markup 
tags embedded in ^e data stream. The proxy server 1 2 is adapted to extract from the tag body 
the property pointmg to &e location of, for example, a "drm file*' ^iiich is located at a distant 
point on the Intemet The proxy server 12 then requests (arrow 3) and receives (arrow 3a) the 
designated <DRM> file(sX which may use, for example, the XML syntax. The proxy server 
12 extracts from this file the "content^type" and "content^location" (a URL, for example) of 
die actual content object (which is typically packaged in a secure container or the like). 

The service interprets the omtmtjype, which typicaUy uses ^'NOME^'oicoding (e.g. 
image^peg), and compares die cont^_type against one or more content_types registered with 
die proxy service. If the content jtype is one of the registered types with the service, it 
determines a ^'clear^ tag structure which will be passed back to the end user. For example, 
if the packaged content is of MIME type image/jp^ the modified tag structure must be in the 
format ^'<jmg src='..,'>*\ In odier words, if die resource is permitted to be made available to 
die end user (as a registered or licCTced user, say), then the proxy server 12 wiU proceed as 
follows. 

The proxy server 12 then requests (arrow 4) that the remote DRM web service 14 create a 
session*specific, "clear-content*' version of the designated resource, and retum the session- 
unique URL. In more detail, the drm service interface 1 8 locates (via arrow 4a) the encrypted 
version of the <drm> file held in an oicrypted content archive 20 within the drm web service 
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14. The content archive 20 then sends the encrypted <dnn> file to a d&'Cryption conq>onent 
22» again located wifhin the dnn web ssvice 14. The de-cryption component 22 decrypts the 
file to produce a *'clear-contenf ' version thereof which clear-content version is transmitted to 
(via arrow 4c) and cached using a session-specific (tenq>orary) unique file name in a clear- 
content cache 24, once again located witiiin die dnn web service 14. The unique file name is 
also sent to the drm service interface 18 which generates a session-specific UORL of the 
unsecured resource for transmission (via arrow 4d) to the proxy server 12. 

The proxy server 12 generates a modified content stream (for exan^le, an HTML page) using 
(in this case) MIME-s^propriate fonnattmg, the HTML page being reformatted to identify the 
unique, session-specific URL supplied by the drm web service 14. The re-formatted HTML 
page is then returned (arrow S) to the web browser 10. 

The web browser 10 dien requests (arrow 6) the unsecured contCTt held in the clear-content 
cache 24 via a redirector service inter&ce 26 within the drm web service 14, the browser's 
request comprising a query string including the session-specific URL» wfaidi should only be 
valid during die current browser session. The redirector service inter&ce 26 determines ^ 
current browser session and compares it widi the session-^ecific URL included in die query 
string sent by die browser 10. If the session matches, and any timeout rules on the temporary 
storage of the cleared content have not expired, the redirector service interfiice 26 sends die 
clear content to the web browser 1 0 for use by the end user. 

It will be appreciated that die present invention builds on emerging concepts of proxy-based 
intervention and content adaptation and provides a platform upon which to generalise the 
interpretation and enforcement of information handling and digital rights management 
policies, which is particularly useful inportal-like scenarios, where large related bases of users 
widi heterogeneous viewirigenvironmaits might need policies applied in uniform and flexible 
ways. In other words, the present invCTition enables the homogeneous application of 
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information handling policies (such as copyright enforcement policies) in user-^ecific wa^ 
on heterogeneous institutional networks. 

Hie s^yproach adopted by the preset invention essentially keeps die process and mechanisms 
of user authentication mid authorisation sepaato and distinct fiom die actual implementation 
of policy CTforcement. This allows organisadons or contmt services to leverage centrally* 
managed enterprise databases for the administration of information policies (e.g. 
organisational site licences to electronic journals, especially in the case ^ere different 
policies are to be applied to different roles within the organisation). 

In the foregoing specification, the invention has been described witii reference to specific 
exemplary embodiments thereof It will, however, be apparent to a person skilled in the art 
that various modifications and changes may be made thereto without departing from the 
broader spirit and scope of the invration as set forth in the appended claims. Accordingly, the 
specification and drawings are to be regarded in an illustrative, rather than a restrictive, sense. 
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CLAIMS: 

1 . Apparatus for providing a proxy serNdce between one or more client platforms and 
one or more remote content provides providing electronic content or information, 
the apparatus comprising means for receiving and interpreting arequest from a client 
platform for electronic content from a content provider, means for transmitting said 
request to said content provider and for receiving data including at least one mark^ 
identifying the location of a remote information handling and/or policy enforcement 
server appropriate to the content being requested, means for interpreting said one or 
more markers and transmitting a request on behalf of said client platform for a clear- 
content version of said content for transmission to said client platform provided &at 
the requirements of the information handling and/or policy enforcement serv^ are 
met. 

2. Apparatus for providing a proxy service between one or more client platforms and 
one or more remote platforms arranged to receive electronic content or information 
from said one or more client platforms, the apparatus comprising means for receiving 
data from the client platform for transmission to a remote platform, said data being 
representative of the information or content to be provided to said remote platfomi 
and including at least one marker identifying the location of a remote information 
handling poUcy enforcement service appropriate to the information being provided, 
means for interpreting said one or more markers and transmitting a request to the 
appropriate information handling policy enforcement service for a clear-content 
version of said information to be provided to said remote location provided that the 
requirements of said information handling policy enforcement service are met 

3. Apparatus according to claim 1 , wherein in response to a request for content for the 
proxy service, the content server returns a data stream including one or more markers 
including details of the location of one or more other services with which the proxy 
service must interact before a copy of the content can be transniitted to the client 
platform. 
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4. Apparatus according to claimS, wherein the markers are preferably embedded within 
the data stream and only recognisable and interpretable by specific means provided 
within the proxy service. 

m 

5 . Apparatus according to claim 1 , wfa^in in transmitting a request for the contrat to ^ 
the remote infomiation handling/rights management server, the proxy service is 

arranged to include in the request data relating to the client platform, such as the 
session ID in the case where the client platform is a web browser of the like. 

6. Apparatus according to claim 1 , wherein one the request for content is received from 
the proxy service, and the information handling/rights management server has 
verified the legitimacy of the request, it creates a clear-content version of the content 
and stores it at a particular location, eith^ locally or remotely and returns details of 
said location to the proxy service. 

7. Apparatus according to claim 6, wherein said clear-content version of the content is 
stored temporarily. 

8. Apparatus according to claim 6, wherein ttie proxy service in arranged to transmit the 
details of the location of whidi the clear-content version of the content is stored to 
the client platform, so that the client platform can retrieve said clear-content copy, 
if certain requirements of the information handling/rights management server are 
met. 

9. A method of providing a proxy service between one or more client platforms and one 
or more remote content servers providing electronic content, the method comprising 
the stq)s of receiving and interpr^g a request from a client platform for electronic 
contmt from a content s^er, transmitting said request to said content server and for 
receiving data including at least one marker identifying the location of a remote 
information handling and/or policy enforcement server appropriate to the content 
being requested, means for interpreting said one or more markers and transmitting 
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a request on behalf of said client platfonn for a clear-content version of said content 
for transmission to said client platform provided that the requirements of said 
information handling and/or policy enforcemrat service are met. 

A method for providing a proxy service between one or more client platforms and 
one or more remote platfoms arranged to receive electronic content or information 
fix>m said one or more client platforms, the method comprising the steps of receiving 
data fiom a client platform for transmission to a remote platform, said data being 
representative of information or content to be provided to said remote platform and 
including at least one marker identifying the location of a remote information 
handling policy enforcement service appropriate to the information being provided, 
interpreting said one or more markers and transmitting a request to the appropriate 
information handling policy enforcement service for a clear-content version of said 
information to be provided to said ronote location provided that the requirements of 
said information handling policy enforcement service are met 

11. Apparatus for providing a proxy service substantially as herein described with 
reference to the accompanying drawing. 

12. A method for providing a proxy service substantially as herein described with 
reference to the accompanying drawing. 
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